Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 21 replies
  • Subscribers 1 subscriber
  • Views 15634 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Longs start of .NET applications from network drive

AndrejK

Hello,

We are having problems with Sophos On-Access scanner. When enabled (always and default for every workstation in company) it can take up to 60-120 seconds before a .NET application located on network drive will start. It includes a single executable and around 10MB of DLL libraries which are located in same folder. If I disable On-Access scanning it opens instantly.

If I check the Task Manager I can see that Savservice.exe is peaking at around 20-40% which tells me that DLL files are beeing scanned. And this is taking way too long.

I tried to exclude the folders like so:

\\SERVER\SHARE\FOLDER\ and

X:\FOLDER\

or any other possible exclusion solution but none helped. When user closes application and starts it again from same network path it will open almost instantly. Until next reboot that is.

What can I do? How to correctly exlude those folder from beeing scanned or how to setup the Endpoint so the DLL files are not scanned everytime?

We are using Windows 7 Pro 64bit OS, Novell Netware file server and latest up-to-date version of Sophos Endpoint Security (9.7).

Thank you for your support.

:25101


This thread was automatically locked due to age.
Parents
  • 0

    I gave Process Monitor a try. The path looks OK to me. And no matter what path I put as exclusion he doesn't skip that folder from scanning. What I found strange was the filenames he is scanning. If file is Office.dll then he opens it but then he is looking for file eciffO.ini which he doesn't finds and hangs for a while until moving to scan next file. Not sure if this is normal.

    I exported the result as CSV and PML format. You can see the content of CSV file here (I changed the folder names):

    http://paste2.org/p/2034352

    As you can see from timestamp it took him almost exactly 3 minute to copy that folder to local HDD.

    Can you make something out of the CSV file? And thank you for the support :).

    :25189
Reply
  • 0

    I gave Process Monitor a try. The path looks OK to me. And no matter what path I put as exclusion he doesn't skip that folder from scanning. What I found strange was the filenames he is scanning. If file is Office.dll then he opens it but then he is looking for file eciffO.ini which he doesn't finds and hangs for a while until moving to scan next file. Not sure if this is normal.

    I exported the result as CSV and PML format. You can see the content of CSV file here (I changed the folder names):

    http://paste2.org/p/2034352

    As you can see from timestamp it took him almost exactly 3 minute to copy that folder to local HDD.

    Can you make something out of the CSV file? And thank you for the support :).

    :25189
Children
No Data